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Dear Examiner: 
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APPEAL UNDER 35 U.S.C. SI 34 

This Brief Is submitted In connection with the decision of the Primary Examiner 
set forth in the Final Oflicial Adion dated Febaiary 2, 2010, finally rejecting claims 1-4 
and 7-17, which are all of the pending claims in this application. 

The Commissioner is hereby authorized to charge any appropriate fees under 37 
C.F,R. §41. 20(b)(2) that may be required by this paper, and to credit any overpayment, 
to Deposit Account No. 50-1379. 
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i. Real Party in inlefest 

The real party In interest, by assignment, is Telefcmaktiebolaget LM Ericsson, a 
Swedish corporation , with its principa! office at SE-164 83 Stockholm, Sweden. 

y. Related Appeals and Interferences 

To the best of the knowledge of the undersigned, there are no related appeals 
and no interferences regarding tiie above application. 

lit. status of Claims. 

Claims 1-4 and 7-17 are pending in the present application, v^idn are finally 

rejected and form the basis for this Appeal Claims 1-4 and 7-17, including all 
amendments to the claims are attached in the Claims /^pendix. 

iV. status of Amendments. 

Applicant has amended claims 1, 7 and 1 1 (changing 'and' to 'or*) in response to 
the Final Office Action to clarify the intent of the Applicant to show that access to an 

application is gained through one network or the other and not through subsequent 
networks. No other amendments or responses have been filed subsequent to the final 
rejection dated February 2, 2010. The claims set out in the Claims Appendix include all 
entered amendments. 



V. Summary of Claimed Subject Matter. 



Claim Element 


Specification Reference 


1 (PreviousSy Presented) A method for 
requesting access for a user to an appiication 
in a further network, wherein an entity 
providing said application can be accessed 
only through a first network or a second 
network, the appHcation being independent of 
the first and second network, and wherein the 
user attempted to access the appHcation at 
least once through the first network, the 
method comprising the foilowing steps: 


Throughaut the Specification, 
incSuding: page 1, iine 26 through 
page 2, line 13 
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granting the user access to the second 
network. 


Throughout the Specification, 
incSuding: page 1, iine 26 through 
page 2, line 13 


receiving a request for accessing the 
appiication from the user, 


T 
ir 

P 


hroughout the Specificatton, 
ciuding: page 1, Sine 26 through 

age 2, line 13 


detecting by the second network that the user 
already coniacted the application via the first 

network. 


Throughout the Specificatton, 
induding: page 1, Sine 26 through 
page 2, line 13 


requesting by the second network from 
the first network an identifier that has been 
generated and used by the first network to 
identify the user towards ttie entity that 
provides the application, 


Throughout the S pecif ication , 
inciuding: page 1, iine 26 through 
page 2, iine 13 


receiving the requested, generated identifier by 
the second network, and 


Throughout the S pecif icatbn , 
induding: page 1, line 26 through 
page 2, line 13 


sending a request, by the second network, 
for accessing the application and ttie 

qer^erated identifier received from the first 
network, towards the entity providing the 
appHcation to identify the user to the entity that 
provides the appSication, the identifier being 
used by the first network is the san^e identifier 
used by the second network. 


Throughout the Specification, 
induding: page 1, line 26 through 
page 2, iine 13 




Claim Eiement 


Specificatton Reference 


1 7. (Previousiy Presented) A system for 
granting user access to an eppNcation in a 
further network, wherein an entity providing 
said appiication can be accessed only through 
a first netw^ork or a second network, said 
appHcation being independent of the first and 
second networks, and wherein the user 
attempted to access the application at least 
once through the first network, comprising: 


Throughout the Specification, 
induding: page 1 line 26 through 
page 2, Hne 13, 


means for granting said user access to 
the second network, 


T 
ir 


hroughout the Specification, 
eluding: page 1 line 26 through 
age 2, line 13 


means for receiving a request for 
accessing the appiication from the user within 
said second network, 


J 
ir 


hroughout the Specification, 
duding: page 1, iine 26 through 
age2Jine13 


means for detecting, by the second 
network, that the user already attempted to 
access the application via the first network, 


T 
ir 

P 


hroughout the Specification, 
eluding: page 1, iine 26 through 
2, line 13. 
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means for requesting from the first 
network, by the second network, an identifier 
that has been generated and used by the first 
network to identify the user towards the entity 
that provides the application. 


Throughout the Specification, 
1 induding: page 1, iine 26 through 
page 2, iine 13. 


means for receiving the requested, 
generated identifier, from the first network, by 
the second network, and 


Throughout the Specification, 
induding: page 1, iine 26 through 
page 2, iine 13. 


means for sending a request, by the 
second network, for accessmg the appiication 
towards the entity providing the application, 
said request including the generated identifier 
received from the first network to identify the 
user to the entity that provides the apptication, 
the identifier being used by the first network is 
the same identifier used by the second 
network. 


Throughout the Specification, 
induding: page 1, iine 26 through 
page 2, line 13 



Claim Element 


Specification Reference 


1 1 . (Previously Presented) A system for 
handling a user request towards an externaS 
appiication wherein a network node providing 
said application is only accessible from a first 
communication network or a second 
communication network, the external 
appiication being independent of the first and 
second communication networks, said second 
communication network comprising: 


IT 
ir 

1 p 


hroughout the Specification, 
duding: page 1, line 26 through 
age 2, line 13 


means for receiving an access request 
from said user wherein said access request is 
for accessing said application associated with 
said network node: 


Throughout the Specification, 
induding: page 1, iine 26 through 
page 2, line 13 


means for determining that the user had 
previously attempted to access said application 
using said first communication network; 


Throughout the Specification, 
induding: page 1, Sine 26 through 
page 2, iine 13 


means for requesting user information 
associated with said user from said first 
communication network, said user information 
including an identifier generated and used by 
the first communication network to identify the 
user towards the network node that provides 
the appiication; 


Throughout the S pecif ication , 
induding: page 1, iine 26 through 
page 2, line 13 


means for receiving said requested user 
information, induding the generated identifier 


T 
in 


hroughout the Specification, 
jciuding: page 1, iine 26 through 
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from said first communication network; and 


page 2, iine 13 


means for requesting access to said 
network node from said second communication 
network using said received user information, 
including the generated identifier, to identify 
the user to the network node that provides the 
appNcation, the identifier being used by the first 
network is the same identifier used by the 
second network. 


Throughout the Specification, 
induding: page 1, line 26 through 
page 2, line 13 



The spedficatic«i references listed above are pfx>vided solely to <»mply with the 
USPTO's regulaSons regarding appeal briefe. The use of such references should not 

be interpreted to Simst the scope of the claims to such references or to limit the scope of 
the claimed invention in any manner. 

Vi. Grounds of Rejection to be Reviewed on i^peai 
a. Issue 

The Issue presented fcs* this appeal is v^ether daims 1-4 and 7-17 are properly 
rejected under 35 U.S.C. § 103(a) as being unpatentable over Anton et al {US Patent 

7,185,360), hereinafter Anton, in view of inoue, et ai. (US Patent 6,163,843), hereinafter 
Inoue. 

VSi. Argument 

a.) Claims 1-4 and 7-17 are patentable over Anton In view of Inoue. 
The puHPOse of the present Invention is to reduce the Identification process 
by using an Identifier, already proved reliable by one networic, which can be used 

by a subsequent network that trusts the identifier generated by the first network. 
Authentication servers wouid be included in both, separate networks (though not 
shown) in the present invention. !n normal practice, a user requesting access in a 
second network would have to be authenticated again in the second network. As 
previously stated, the present invention obviates this necessity. 

The present inventton claims use of an identifier by boUi a first and a second 
network towards an application in a liif^er networi(, where the identifier is 
generated by the first network. The identifier is requested by and recognized by 
the second network for providing access for the user to the further network without 
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need for further authentication. In Figure 1 of the present appiicatbn (below) an 
embodiment of the present invention is presented. The User attempts to access an 
appiication at EA1 via the depicted fandiine user equipment, UE1, and network 
TNI Maybe the attempt was successfut or maybe not; but the first network 
generated an identifier of the User that is acceptable for entry to TN1 and EA1 . 

The User subsequentfy attempts to access EA1 , but this time through UE2 
and network TN2. Network TN2 detects that the user has already accessed EA1 
via network TNI TN2 requests, and receives, the identification from TN1 and then 
sends a request for the User to access EA1 via TN2 using the identification that 
was valid when User accessed EA1 via network TN 1 . 




UE2 TN2 

Fig. 1 
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The Anton reference {Figure 6, below) discloses a mobile user device 
accessing an Internet service via a network (129) different from tfie tnt^net. The 
mobile user device is queried with an autiientlcation process whereby the mobile 
user device provides identlficatton information to an authentication service. As can 
be seen in Figure 6 below, in comparison to the two access networks illustrated in 
Applicant's figure 1 above, Anton teaches a single network access by the mobile 
user device. Anton does not teadi or suggest a second netw}rk detecting that the 
user already contacted tiie application via flie first networic. In Anton, the mobile 
device user must provide autfienticating information to the authenticating server. 
Anton falls to show, at least, tiat ^e claimed idenfifier, is generated by ftie first 
network and sent from the first network to the second network to connect the user 
to the further network and connect the user to the application. In particular, again 
in contrast to ^ton, the /s^^pHc^nt's invention sends the identifier provided by the 
first network to ihe sea>nd network without input from mobile device user. 
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Inoue discloses a method of rerouting data from a home netwoft to a foreign 
network in v^tdi a mobile computer Is currentiy located. Granting the motile computer 
access to the internet for communicating with the home network is based on the foreign 
network generating key Information for the mobile computer (Inoue coL 10, 1, 28-35, col 
11, !. 20-40). In order to then enable the rerouting of the data from the internet via the 
home network, tfte mobile computer sends a registration message to the home network 
and receives a registration response (Inoue col. 11, I. 61-67). Thus, the mobile 
computer has already been granted access to transmit data outside flie foreign network 
before sending a registration message to the home network. Therefore, the mobile 
computer can already access the internet using his autientication data. Secondly, the 
authentication data generated based on the key information of the particular network 
and used by the mobile computer to identify him towards the internet is difTerent for the 
home network and the foreign network (Inoue col. 11,1. 50, 51, col. 12, 1. 24-35). 

The key request message, sent by the mobile computer, includes information on 
the user. Inoue does not teach or suggest the first network generating and providing an 
identifier of the user to the second network, the user device (mobile computer) does 
that. Inoue requires the mobile computer to provide an identifier to the second network, 
whereas in the Applicant's invention, the second network retrieves the identifier from the 
first network (without contacting the User), inoue requires a mobile device input of an 
identifier originating from tfie mobile device rattier than the second network requesting 
the first network generated identifier. 

The Applicant respectfully presente claim 1, which is analogous to claims 7 and 

11, to iliustrate the differences between the cited art and the Applicant's present 
invention. Figure 1 references are included in claim 1 below strictly to help in explaining 
the relation between the daim language, the Specification and Figure 1. 

1 . (Previously Presented) A method for requesting access for a user (U) to 
an application in a further network (EA1) wherein an entity providing said 
application can be accessed only through a first netwot1< (TNI) or a second 
network (TN2) . the application being independent of the first and second 
network, and wherein ^e user attempted to access the application at least 
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once through the first networic (TNI), the mettiod comprising following 
steps: 

granting the user access to the second network (TN2), 
r^seiving a request for accessing the applica^n from the user, 
detecting by the second network that the user already asntacted the 
application via the first network, 

requesting by the second network from the first network an identifier 
that has been generated (not shown) and used bv the first network to 
identify ttie user towards 8ie entity that provides the application. 

recemng the requested, generated iden^er by ^e second networi<, 

and 

sending a request, by the second network, for accessing the 
application and the generated identifier received ftom the fii^t network, 

towards the entity providing the appiication to identify the user to the entity 
that provides the application, the identifier being used bv the first network is 

With support from a dedslon by tiie Board of Patent /^peals and Interferences 
(BPAl), Ex Parte Oriofsky, the ^plicant respectfully submits ttiat the cited art, Anton 
and Inoue, do not disclose all ttie limitations set forth in independent dalm 1 and does 

not teach or suggest the limitations of claim 1, whether considered individually or in 
combination. 



"|T]he Examiner s^tes that Appellant's arguments are not persuasive because 
one cannot show nonobviousness by attacking references Individually when the 
rejection is based on a combination of references (EAT), y^pellant responds that the 

arguments merely show that, even if combined, the claim elements are not shown in the 
references (RBrl ). 

We agree with /^pellant. Manifestly, if none of the references teach a claimed 
feature, as shown by addressing the references individually, then tfie combination of 
references vwll also not contain flie claimed feature. The admonition against attacking 
references individually applies where an applicant fails to address the combined 
teachings of the references. . (Ex Parte Orlofsky, page 9, BPAl (2002)) 



A single identifier generated by the first network and used by both first and 
second networks is not disdosed in either ttie Anton or the Inoue references. The 
Examiner argues that the claims of the present invention are not limited to one Identifier 
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as long as at least one identifier exists that is shared between netwofi<s. However, ihe 
Applicant respectftilly submits ^at the fourth element of daim 1 states "...requesting by 
the second networ1< from the first network an identifier that has been generated and 



used by the first network to identify the user towards the entity that provides the 
appiication,,..". First, the language of the claim specifically sets apart the one identifier 
of the user (the one that has been generated by the first network for the user). Second, 
the one identifier is used by the firet networ1< to admit^denttly the user to the application 
entity; so the first network cerfifies to the identifier's reliability. Third, ttie second network 
requests the spedfic user Identifier (generated by tiie firet network) from the first 
network so as to admit the user to the application via the second network. 

In a statement in the Advisory Action dated April 4, 2010, the Examiner indicated 
that the /^plicant apparency conceded tiiat the EF2 identifier, in Anton, satisfies the 
requirements for ihe /^pllcant's claimed identifier explicitly. This is incon'ect as the cited 
text from the Applicant's argument is not complete and the quote is out of context. A 
more complete quote would be as fallows: 

Even if authentication sej"ver 137 could be regarded as a second network, it is 
claimed that ^e entity/appiication is accessed through the first network or through the 
second network but not through botii of them In sequence. Receiving EF2 from the 
network 129 by the authentication server 137 / gatekeeper 135 and sending EF2 back 
to the network 129 Indicates that the user accesses the application through the 
authentication server 137 and the network 129. {emphasized text, from the Examiner's 
argument). 

It should be obvious that the Applicant was pointing out that the EF2 identifier is 
routed through network 129 and tiien the authentication server 137. In Anton, the 
Authentication server is required for fiie user to access the target web page after 
sending a request for access fiircwgh networft 129. This is one of the problems the 
Applicant's invention fixes; ^e identifier generated by the first network is the 
authenticator of the user. 

Also in the Advisory Action, in response to the Applicant's arguments that the 
cited art teaches a plurality of identifiers, ttie Examiner answers that the "specific 
Identifier EF2 satisfies the requirements explicitly," Respectfully, even if authentication 
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server 137 in Anton could be regarded as a second network, Uie Applicant's daim 
recites that the entity/application is accessed through the first networ1<; or through the 
second network but not through both of them in sequence. Receiving EF2 from the 
network 129 by the authentication server 137 / gatekeeper 135 and sending EF2 back 
to the network 129 indicates that the user accesses the application via the network 129 
and then the autiientication server 137 (in sequence). 

The Examiner furttier af^ues ttiat . .ttiere are dearly a minimum of two networks 
present,.,". The Applicant does not disagree that Anton dlsdoses more than one 
network. However, the Applicant is daiming two access networks. The Examiner also 
requested the Applicant's opinion as to "...hew a network of the instant Invention can 
perform the Simitations attributed to it.., without possessing an authentication server..,". 
The Appiicant respectfully submits that the AppHcant does not need to disciose every 
element of the invention for a person skilled in ttie art. The limitations in daim 1 indicate 
that an identifier for a user is generated by a first network and since it is acceptable by 
EA1, when the user attempts to access EA1 from a second network that same Identifier 
is retrieved from the fir^t network and presented to the authentication means at EA1 to 
obtain access. 

Neither Anton nor fnoue discloses an identifier that can be shared between 
access networks (first and seccmd access networks) in order to access an application in 
a further netwofic via one access network or the other. 

In summary, the Anton reference does not disdose a second network's use of 
the same identifier generated and used by a first networl?. towards an application in a 

further network. Further, Anton does not disclose a second network reauestinq the 
identifier from the first network . Neither does Inoue disciose using a same identifier 
towards the application by tt^e first or second networks. Further, Inoue does not disciose 
the second networi< requesting an Identifier from 8ie first netwcwt to identify the user 
towards the application. 

As provided in MPEP § 2143, "[t]o establish a prima facte case of 
obviousness, ... the prior art reference (or references when combmed) must 
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teach or suggest ail the claim limitations." In that regard, tiie Applicant submits 
that the requimments of iH'tma focte case of obviousness are not met. The 
Examiner's two references still lati to te^h or suggest each and every element of 
the presently pending (rsdependent claims whether the two references are 
considered indivtduaHy or in combination. The Applicant submits that 
independent claim 1 and analogous independent claims 7 and 11 are therefore 
not obvious. The Applicant respectfully requests ^e allowance of claims 1, 7 and 
11. 

Claims 2<4, 8-10 and 12*17 depend respectively from amended claims 1, 7 
and 11 and recite further limitations in combination with the novel elements of 

claims 1, 7 and 11. Therefore, the allowance of claims 2-4, 7-10 and 12-17 is also 
respectfully requested. 

For al! of the foregoing reasons, it is respectfully submitted that claims 1-4 and 7- 
17 should be allowed. A prompt notice to that effect ts earnestly solicited. 

Respectfuliy submitted, 

/Sidney L. Weatherford/ 

Date: July 30. 2010 Sidney I. Weatherford 

RegistrB^on No. 45,602 

Ericsson inc. 

6300 Legacy Drive. M/S EVR1 C-11 
Piano, Texas 75024 

(972)583-2012 

Sfdney.weatherford@eriGsson.com 
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Vili. Ctairns Appendix, 
tisting of Claims: 

1 . (Previously Presented) A method for requesting access for a user to an application 
in a further network, wherein an entity providing said appflcafion can be accessed only 
through a first network or a second network, the application being independent of the 
first and second network, and wherein the user attempted to access the application at 
least once through the first network, the method comprising the following steps; 

granting the user access to tie second network, 
receiving a request for accessing the application from the user, 
detecting by tie second networi? that tie user already contacted the application 
via the first network, 

requesting by the second network from the first network an identifier that has 
been generated and used by the first network to identify the user towards the entity that 
provides the application, 

receiving the mquested, generated Identifier by the second netwtxk, and 
sending a request, by tie second network, lot accessing the application and the 
generated identifier received from the first networi<, towards the entity praviding the 
application to identify the user to the enfity that provides the application, the Identifier 
being used by the first network is the same identifier used by the second network. 

2. (Previously Presented) The method according to claim 1, wherein the first 
and the second network are run by a different operator 

3. (Previously Presented) The method according to claim 1 further comprising 

the step of sending authentication information to the first network. 

4. (Previously Presented) The method according to claim 1, wherein the entity 
providing the service stores a profile of the user at reception of the first attempt of the 
user to access the service, wherein the profile is assodated to the generated identifier 
sent from the first netvw5f1< and v^erein the second networi< uses the same generated 

Appeal Brief - PAGE 13 of 18 

EUS/xJ/P/-! 0^259 



AtfeMT^ey Docket No. P17536-US1 

identifier for the user towards 8ie entity providing the service in order to achieve Vnat the 
stored profile is used for the user. 

6- 6. (Cancelled ) 

7- (Currently Amended) A system for granting user access to an application in 
a ^rther network, vy^ereln an entity providing said applicatjcm can be accessed only 
through a first network or |[and]| a second networic, said application being independent 
of the first and second netv^^rtcs, and wherein the user attempted to access the 
application at least once through the first network, comprising; 

means for granting said user access to the second network, 

means for receiving a request for accessir^g the application from the user within 
said second network, 

means for detecting, by »ie s^sond network., that the user already attempted to 
access the application via the first network, 

means for requesting from the first network, by the second network, an 

identifier that has been generated and used by the first network to identify the 

user towards the entity that provides the appiication, 

means for receiving the requested, generated identifier, from the first network, 

by the second netvw5ri<, and 

means for sending a request, by the ^cond networic, for accessing the 
appiication towards the entity ;:Mroylding the application, said request Including the 
generated Identifier received fi^om the first networi? to Identify the user to the entity that 

provides the appiication, the identifier being used by the first network is the same 
identifier used by the second network. 

8. (Previously Presented) The system according to claim 7, wherein the first and 
the second networtc are run by different operators. 
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9. (Previously Presented) The system accortJing to daim 7 ftirther comprising 
means for sending authentication information to the first network. 

10. {PreviousSy Presented) The system according to claim 7, wherein the entity 
providing the service stores a profile of the user at reception of the first attempt of the 
user to access the sen/Ice, wherein the profile is associated to the generated identifier 
sent from the first netwof1< and vyrfierein the second networi<: uses the same generated 
identifier for the user towards the entity providing fiie service In order to achieve that the 
stored profile Is used for tiie user. 

11. (Currently Amended) A system for handling a user request towards an 
external appiication wherein a network node providing said application is only 
accessible from a first communication network or gandJJ a second cc»Dmunication 
network, the external appllcafion being Independent of the first and second 
communication networks, said second communication network comprising: 

means for receiving an access request firom said user wherein said access 
request is for accessing said application associated with said network node; 

means for determining that the user had previously attempted to access said 
application using said first communication network; 

means for requesting user information associated with said user from said first 
communication networi^, said user Information Induding an identifier generated and 
used by the first communication networi< to Identify ttie user towards the network node 
that provides the application; 

means for receiving said requested user information, including the generated 
identifier from said first communication network; and 

means for requesting access to said network node from said second 
communication netwoit using said received user Information, Including the generated 
identifier, to Identify the user to the netwoiic node tiiat provides the application, the 
identifier being used by tiie first network is the same Identifier used by the second 
network. 
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12. (Previously Presented) The system of Claim 1 1 v\^erein said user infonmation 
induding said generated Identifier is used by said first communication network in 
communicating with said rtetwoil^ node. 

13. (Previously Presented) The system of Claim 1 1 wherein said user information 
inciudes user preference Information used by said first communication network in 
communicating with said netvrail? node. 

14. (PrevlcHJsly Presented) The system of Claim 1 1 lurtiier comprising means for 
sending authentication information from the second communication network to the first 

communication networt*;. 

15. (Previously Presented) The system of Claim 11 wherein said means for 
determining tiiat the user had previously attempted to access said application using said 
first communication network further comprises means for receiving an Indicator from 
said user. 

16. (Previousiy Presented) The system of Claim 11 wherein said means for 
determining that the user had previously attempted to access said application using said 
first communication network further comprises means for determining that the user had 
been ported from said first communication network to said second communication 
network. 

17. (PreviousSy Presented) The method according to claim 1, further comprising 
the step of storing the generated identifier in the first network. 
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iX> Evidence Appendix. 

NONE 
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X. Related Proceedings Apjpendlix. 
NONE 
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